UCSF IT Technology

Red Hat released security updates in March to address vulnerabilities in Red Hat products.For a complete description of the vulnerabilities and affected systems, go to Red Hat Security Advisories.IT Security Read more about IT Security service offerings.

Suse released security updates in March to address vulnerabilities in Suse products.For a complete description of the vulnerabilities and affected systems, go to Suse March 2025 Archives by date.IT Security Read more about IT Security service offerings.

CrushFTP has released security updates to address vulnerabilities in CrushFTP. An attacker could exploit this vulnerability to obtain unauthorized access.For a complete description of the vulnerabilities and affected systems, go to CVE-2025-2825 Detail.IT Security Read more about IT Security service offerings.

Splunk released security updates to address vulnerabilities in Splunk products. An attacker could exploit these vulnerabilities to perform remote code execution (RCE).For a complete description of the vulnerabilities and affected systems, go to Splunk Security Advisories Archive.IT Security Read more about IT Security service offerings.

Mozilla released security updates to address vulnerabilities in Firefox products.For a complete description of the vulnerabilities and affected systems, go to Security Vulnerabilities fixed in Firefox.IT Security Read more about IT Security service offerings.

VMware has released security updates to address vulnerabilities in VMware Tools for Windows. An attacker could exploit this vulnerability to bypass authentication.For a complete description of the vulnerabilities and affected systems, go to Ingress Nightmare: 9.8 Critical Unauthenticated Remote Code Execution Vulnerabilities in Ingress NGINX.IT Security 

A security update was released to address a Critical vulnerability in Next.js. An attacker could exploit this vulnerability to bypass authorization checks.For a complete description of the vulnerabilities and affected systems, go to Next.js and the corrupt middleware: the authorizing artifact.IT Security Read more about IT Security service offerings.

Google has released new versions of Chrome to address vulnerabilities in Google Chrome.For a complete description of the vulnerabilities and affected systems, go toIT Security Read more about IT Security service offerings.